Last updated: July 14, 2026
We collect information you provide directly: name, email address, password (hashed), profile details, and uploaded photos. We also automatically collect usage data such as pages visited, features used, device type, browser, and IP address for analytics and security purposes.
We use your information to: provide and improve the Service; send transactional emails (account confirmation, invitation links, password resets); send service updates and feature announcements (you may opt out); detect and prevent fraud or misuse; and comply with legal obligations.
Photos you upload are stored securely on our cloud infrastructure (Wasabi S3-compatible storage). Public galleries are accessible to anyone with the link. Private galleries are only accessible to users you explicitly invite. We do not sell or share your photos with third parties.
We do not sell your personal information. We may share data with trusted service providers (hosting, analytics, payment processors) strictly for delivering the Service. We may disclose information if required by law or to protect the rights and safety of our users.
When you subscribe to a paid plan or make a one-time purchase (such as an event package), we share the billing details needed to process the transaction — your name, email address, the amount, currency, and the plan or package selected — with our payment processors (currently WiPay, and PayPal where enabled). We do not store your full card number, bank account, or other payment credentials; these are handled directly by our payment processors under their own privacy and security policies. We keep a record of your transactions, including amount, currency, plan or package, billing cycle (monthly, annual, or one-time), and status, for accounting, support, fraud-prevention, and legal/tax purposes, for as long as required by applicable law even after your account is deleted.
We retain your data as long as your account is active. You can permanently delete your account and associated data at any time from Settings → Account — see "Account Deletion" in our Terms of Use for exactly what is removed and how. Deleted data is removed from our active systems within 30 days, though backup copies and billing/transaction records may persist longer as described in "Payment and Billing Information" or as required by law.
We implement industry-standard security measures including HTTPS encryption, hashed passwords, and access controls. While we strive to protect your data, no internet transmission is 100% secure.
We use cookies and similar technologies to maintain your session, remember preferences, and analyse usage. See our Cookie Policy for details. You can control cookie settings through your browser.
Depending on your jurisdiction, you may have rights to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to or restrict processing; and data portability. Contact us to exercise these rights.
The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or a notice on the Service. Your continued use after changes constitutes acceptance.
For privacy-related questions or requests, contact us at privacy@thegalleryviewer.com or through our Contact page.
Questions about privacy? Contact us or read our Terms of Use.